@harperfast/harper 5.2.13 → 5.3.0-beta.1

package/dist/server/threads/isolatedApplications.d.ts

@@ -0,0 +1,47 @@
+export declare const DEFAULT_MAX_ISOLATED_APPLICATIONS = 8;
+/** The application this thread is dedicated to, if it is a dedicated worker. */
+export declare function thisThreadsIsolatedApplication(): string | undefined;
+export declare function thisThreadOwnsApplication(appName: string | undefined, owner?: string | undefined): boolean;
+export declare function isIsolatedApplication(appName: string, config?: Record<string, any> | undefined): boolean;
+/** Every application the root config marks isolated, in config order. */
+export declare function isolatedApplicationNames(config?: Record<string, any> | undefined): string[];
+export declare function presentIsolatedApplicationNames(config?: Record<string, any> | undefined, componentsRoot?: string, installedRoot?: string, runApplicationPath?: string | undefined): string[];
+export declare function maxIsolatedApplications(): number;
+/** Why `appName` cannot claim a place in the dedicated-worker budget, if the budget is full. */
+export declare function isolatedApplicationCapacityRefusal(appName: string, runningApplications: Iterable<string>, max?: number): string | undefined;
+/**
+ * Whether the calling thread is the one that loads the application `appName` (an application: a
+ * directory under componentsRoot, or a root-config entry with `package`). A dedicated worker loads
+ * only its own application; every other thread -- pool workers and the main thread alike -- loads only
+ * the applications that are not isolated. Decided before any of the application's modules are
+ * imported, so a skipped application has no side effects on the thread that skipped it.
+ */
+export declare function shouldLoadApplicationHere(appName: string, owner?: string | undefined, config?: Record<string, any> | undefined): boolean;
+/**
+ * Whether this thread starts the uWS listener for one `uwsServeConfigs` entry (see listenOnPorts()).
+ * A dedicated worker starts only its own per-application UDS mirrors -- the entries that carry a
+ * `socketPath` -- and never a global port listener, which the kernel would hand connections for every
+ * other application.
+ */
+export declare function shouldStartUwsListenerHere(serveConfig: {
+    socketPath?: string;
+}, owner?: string | undefined): boolean;
+/**
+ * Whether a dedicated worker can be reached at all: it binds only UDS mirrors of the secure port, so
+ * without `tls.unixDomainSockets` and a secure port an isolated application would load and answer
+ * nothing, silently. Refused at admission instead. Returns the reason, or undefined when reachable.
+ */
+export declare function isolatedApplicationsUnreachableReason(platform?: NodeJS.Platform): string | undefined;
+/** Why `appName` cannot get a dedicated worker on this instance, or undefined when it can. */
+export declare function isolatedApplicationRefusal(appName: string): string | undefined;
+/**
+ * The filesystem name of an isolated worker's UDS mirror for `port`: every UTF-8 byte outside
+ * `[A-Za-z0-9._]` becomes a fixed-width `%XX`, which is injective (two application names never share
+ * a socket), and the `app-` prefix keeps it apart from the pool's `<workerIndex>-<port>` names.
+ */
+export declare function applicationSocketName(appName: string, port: number | string): string;
+/** What a dedicated worker publishes in its mirror metadata for the proxy to route by. */
+export declare function isolatedApplicationRoute(appName?: string | undefined, config?: Record<string, any> | undefined): {
+    application: string;
+    hosts: string[];
+} | undefined;

package/dist/server/threads/isolatedApplications.js

@@ -0,0 +1,171 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MAX_ISOLATED_APPLICATIONS = void 0;
+exports.thisThreadsIsolatedApplication = thisThreadsIsolatedApplication;
+exports.thisThreadOwnsApplication = thisThreadOwnsApplication;
+exports.isIsolatedApplication = isIsolatedApplication;
+exports.isolatedApplicationNames = isolatedApplicationNames;
+exports.presentIsolatedApplicationNames = presentIsolatedApplicationNames;
+exports.maxIsolatedApplications = maxIsolatedApplications;
+exports.isolatedApplicationCapacityRefusal = isolatedApplicationCapacityRefusal;
+exports.shouldLoadApplicationHere = shouldLoadApplicationHere;
+exports.shouldStartUwsListenerHere = shouldStartUwsListenerHere;
+exports.isolatedApplicationsUnreachableReason = isolatedApplicationsUnreachableReason;
+exports.isolatedApplicationRefusal = isolatedApplicationRefusal;
+exports.applicationSocketName = applicationSocketName;
+exports.isolatedApplicationRoute = isolatedApplicationRoute;
+/**
+ * Isolated applications: an application whose root-config entry carries `isolated: true` runs in a
+ * worker thread of its own that loads no other application (harper#642, tier 2).
+ *
+ * The invariant every helper here serves: an isolated application is loaded by exactly one thread,
+ * and that thread loads nothing else. The dedicated worker is an ordinary `http` worker by type --
+ * so restarts, overlap rules and shutdown treat it as one -- distinguished only by
+ * `workerData.isolatedApplication`. It binds none of the public ports (the kernel would hand it
+ * connections for every other application) and is reachable only through its own UDS mirror, whose
+ * metadata names the application and its hosts for the fronting proxy to route by.
+ */
+const node_worker_threads_1 = require("node:worker_threads");
+const manageThreads_js_1 = require("./manageThreads.js");
+const configUtils_ts_1 = require("../../config/configUtils.js");
+const env = __importStar(require("../../utility/environment/environmentManager.js"));
+const hdbTerms_ts_1 = require("../../utility/hdbTerms.js");
+const domainSocket_ts_1 = require("../../utility/domainSocket.js");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.DEFAULT_MAX_ISOLATED_APPLICATIONS = 8;
+/** The application this thread is dedicated to, if it is a dedicated worker. */
+function thisThreadsIsolatedApplication() {
+    return node_worker_threads_1.workerData?.isolatedApplication;
+}
+function thisThreadOwnsApplication(appName, owner = thisThreadsIsolatedApplication()) {
+    return owner !== undefined && appName === owner;
+}
+function isIsolatedApplication(appName, config = (0, configUtils_ts_1.getConfigObj)()) {
+    const entry = config?.[appName];
+    return typeof entry === 'object' && entry !== null && entry.isolated === true;
+}
+/** Every application the root config marks isolated, in config order. */
+function isolatedApplicationNames(config = (0, configUtils_ts_1.getConfigObj)()) {
+    if (!config)
+        return [];
+    return Object.keys(config).filter((name) => isIsolatedApplication(name, config));
+}
+function presentIsolatedApplicationNames(config = (0, configUtils_ts_1.getConfigObj)(), componentsRoot = (0, configUtils_ts_1.getConfigPath)(hdbTerms_ts_1.CONFIG_PARAMS.COMPONENTSROOT), installedRoot = (0, node_path_1.join)(env.get(hdbTerms_ts_1.CONFIG_PARAMS.ROOTPATH), 'components'), runApplicationPath = process.env.RUN_HDB_APP) {
+    return isolatedApplicationNames(config).filter((application) => (0, node_fs_1.existsSync)((0, node_path_1.join)(componentsRoot, application)) ||
+        (0, node_fs_1.existsSync)((0, node_path_1.join)(installedRoot, application)) ||
+        (runApplicationPath && (0, node_path_1.basename)(runApplicationPath) === application));
+}
+function maxIsolatedApplications() {
+    const configured = Number(env.get(hdbTerms_ts_1.CONFIG_PARAMS.THREADS_MAXISOLATED));
+    return Number.isInteger(configured) && configured >= 0 ? configured : exports.DEFAULT_MAX_ISOLATED_APPLICATIONS;
+}
+/** Why `appName` cannot claim a place in the dedicated-worker budget, if the budget is full. */
+function isolatedApplicationCapacityRefusal(appName, runningApplications, max = maxIsolatedApplications()) {
+    const running = new Set(runningApplications);
+    if (running.has(appName) || running.size < max)
+        return undefined;
+    return `the instance already runs ${max} isolated application(s) (threads.maxIsolated)`;
+}
+/**
+ * Whether the calling thread is the one that loads the application `appName` (an application: a
+ * directory under componentsRoot, or a root-config entry with `package`). A dedicated worker loads
+ * only its own application; every other thread -- pool workers and the main thread alike -- loads only
+ * the applications that are not isolated. Decided before any of the application's modules are
+ * imported, so a skipped application has no side effects on the thread that skipped it.
+ */
+function shouldLoadApplicationHere(appName, owner = thisThreadsIsolatedApplication(), config = (0, configUtils_ts_1.getConfigObj)()) {
+    if (owner !== undefined)
+        return appName === owner;
+    return !isIsolatedApplication(appName, config);
+}
+/**
+ * Whether this thread starts the uWS listener for one `uwsServeConfigs` entry (see listenOnPorts()).
+ * A dedicated worker starts only its own per-application UDS mirrors -- the entries that carry a
+ * `socketPath` -- and never a global port listener, which the kernel would hand connections for every
+ * other application.
+ */
+function shouldStartUwsListenerHere(serveConfig, owner = thisThreadsIsolatedApplication()) {
+    return owner === undefined || Boolean(serveConfig.socketPath);
+}
+/**
+ * Whether a dedicated worker can be reached at all: it binds only UDS mirrors of the secure port, so
+ * without `tls.unixDomainSockets` and a secure port an isolated application would load and answer
+ * nothing, silently. Refused at admission instead. Returns the reason, or undefined when reachable.
+ */
+function isolatedApplicationsUnreachableReason(platform = process.platform) {
+    if (platform === 'win32')
+        return 'Windows does not support per-application UDS mirrors';
+    // the main thread standing in as the only worker (threads.count: 0) has no thread to give
+    if (node_worker_threads_1.isMainThread && (0, manageThreads_js_1.getWorkerIndex)() === 0)
+        return 'threads.count is 0, so there is no worker thread to dedicate';
+    if (!env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_SECUREPORT))
+        return 'no http.securePort is configured';
+    if (!env.get(hdbTerms_ts_1.CONFIG_PARAMS.TLS_UNIXDOMAINSOCKETS))
+        return 'tls.unixDomainSockets is not enabled';
+    return undefined;
+}
+/** Why `appName` cannot get a dedicated worker on this instance, or undefined when it can. */
+function isolatedApplicationRefusal(appName) {
+    const unreachable = isolatedApplicationsUnreachableReason();
+    if (unreachable)
+        return `its worker would be unreachable: ${unreachable}`;
+    const socketPath = (0, node_path_1.join)(env.getHdbBasePath(), 'sockets', `${applicationSocketName(appName, env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_SECUREPORT))}.sock`);
+    if ((0, domainSocket_ts_1.isDomainSocketPathTooLong)(socketPath))
+        return `its UDS mirror path ${socketPath} exceeds the platform limit`;
+    return undefined;
+}
+/**
+ * The filesystem name of an isolated worker's UDS mirror for `port`: every UTF-8 byte outside
+ * `[A-Za-z0-9._]` becomes a fixed-width `%XX`, which is injective (two application names never share
+ * a socket), and the `app-` prefix keeps it apart from the pool's `<workerIndex>-<port>` names.
+ */
+function applicationSocketName(appName, port) {
+    let encoded = '';
+    for (const byte of Buffer.from(appName, 'utf8')) {
+        const c = String.fromCharCode(byte);
+        encoded += byte < 0x80 && /[A-Za-z0-9._]/.test(c) ? c : `%${byte.toString(16).toUpperCase().padStart(2, '0')}`;
+    }
+    return `app-${encoded}-${port}`;
+}
+/** What a dedicated worker publishes in its mirror metadata for the proxy to route by. */
+function isolatedApplicationRoute(appName = thisThreadsIsolatedApplication(), config = (0, configUtils_ts_1.getConfigObj)()) {
+    if (!appName)
+        return undefined;
+    const host = config?.[appName]?.host; // a string, as the mount parser requires
+    return { application: appName, hosts: typeof host === 'string' && host ? [host] : [] };
+}
+//# sourceMappingURL=isolatedApplications.js.map

package/dist/server/threads/isolatedApplications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolatedApplications.js","sourceRoot":"","sources":["../../../server/threads/isolatedApplications.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,wEAEC;AAED,8DAKC;AAED,sDAMC;AAGD,4DAGC;AAED,0EAYC;AAED,0DAGC;AAGD,gFAQC;AASD,8DAOC;AAQD,gEAKC;AAOD,sFAOC;AAGD,gEAUC;AAOD,sDAOC;AAGD,4DAOC;AA5JD;;;;;;;;;;GAUG;AACH,6DAA+D;AAC/D,yDAAoD;AACpD,gEAA0E;AAC1E,qFAAuE;AACvE,2DAA0D;AAC1D,mEAA0E;AAC1E,qCAAqC;AACrC,yCAA2C;AAE9B,QAAA,iCAAiC,GAAG,CAAC,CAAC;AAEnD,gFAAgF;AAChF,SAAgB,8BAA8B;IAC7C,OAAQ,gCAAkB,EAAE,mBAAmB,CAAC;AACjD,CAAC;AAED,SAAgB,yBAAyB,CACxC,OAA2B,EAC3B,QAA4B,8BAA8B,EAAE;IAE5D,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,CAAC;AACjD,CAAC;AAED,SAAgB,qBAAqB,CACpC,OAAe,EACf,SAA0C,IAAA,6BAAY,GAAE;IAExD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED,yEAAyE;AACzE,SAAgB,wBAAwB,CAAC,SAA0C,IAAA,6BAAY,GAAE;IAChG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAgB,+BAA+B,CAC9C,SAA0C,IAAA,6BAAY,GAAE,EACxD,iBAAyB,IAAA,8BAAa,EAAC,2BAAa,CAAC,cAAc,CAAW,EAC9E,gBAAwB,IAAA,gBAAI,EAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,EAC3E,qBAAyC,OAAO,CAAC,GAAG,CAAC,WAAW;IAEhE,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,MAAM,CAC7C,CAAC,WAAW,EAAE,EAAE,CACf,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC7C,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC,kBAAkB,IAAI,IAAA,oBAAQ,EAAC,kBAAkB,CAAC,KAAK,WAAW,CAAC,CACrE,CAAC;AACH,CAAC;AAED,SAAgB,uBAAuB;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,yCAAiC,CAAC;AACzG,CAAC;AAED,gGAAgG;AAChG,SAAgB,kCAAkC,CACjD,OAAe,EACf,mBAAqC,EACrC,GAAG,GAAG,uBAAuB,EAAE;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,6BAA6B,GAAG,gDAAgD,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CACxC,OAAe,EACf,QAA4B,8BAA8B,EAAE,EAC5D,SAA0C,IAAA,6BAAY,GAAE;IAExD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,KAAK,KAAK,CAAC;IAClD,OAAO,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CACzC,WAAoC,EACpC,QAA4B,8BAA8B,EAAE;IAE5D,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,SAAgB,qCAAqC,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAChF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,sDAAsD,CAAC;IACxF,0FAA0F;IAC1F,IAAI,kCAAY,IAAI,IAAA,iCAAc,GAAE,KAAK,CAAC;QAAE,OAAO,8DAA8D,CAAC;IAClH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,eAAe,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,qBAAqB,CAAC;QAAE,OAAO,sCAAsC,CAAC;IACjG,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,8FAA8F;AAC9F,SAAgB,0BAA0B,CAAC,OAAe;IACzD,MAAM,WAAW,GAAG,qCAAqC,EAAE,CAAC;IAC5D,IAAI,WAAW;QAAE,OAAO,oCAAoC,WAAW,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAA,gBAAI,EACtB,GAAG,CAAC,cAAc,EAAE,EACpB,SAAS,EACT,GAAG,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,eAAe,CAAC,CAAC,OAAO,CAChF,CAAC;IACF,IAAI,IAAA,2CAAyB,EAAC,UAAU,CAAC;QAAE,OAAO,uBAAuB,UAAU,6BAA6B,CAAC;IACjH,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,OAAe,EAAE,IAAqB;IAC3E,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,IAAI,GAAG,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChH,CAAC;IACD,OAAO,OAAO,OAAO,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,0FAA0F;AAC1F,SAAgB,wBAAwB,CACvC,UAA8B,8BAA8B,EAAE,EAC9D,SAA0C,IAAA,6BAAY,GAAE;IAExD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,yCAAyC;IAC/E,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxF,CAAC"}

package/dist/server/threads/itc.d.ts

@@ -16,9 +16,11 @@ export function validateEvent(event: any): string;
  * @param schema
  * @param table
  * @param attribute
+ * @param branchPath the branch directory when the change is to a scope-private branch of `schema`
+ *   rather than to the database itself (resources/databases.ts `reloadBranchAt`)
  * @constructor
  */
-export function SchemaEventMsg(originator: any, operation: any, schema: any, table?: any, attribute?: any): void;
+export function SchemaEventMsg(originator: any, operation: any, schema: any, table?: any, attribute?: any, branchPath?: any): void;
 export class SchemaEventMsg {
     /**
      * Constructor function for the message of schema ITC events
@@ -27,14 +29,17 @@ export class SchemaEventMsg {
      * @param schema
      * @param table
      * @param attribute
+     * @param branchPath the branch directory when the change is to a scope-private branch of `schema`
+     *   rather than to the database itself (resources/databases.ts `reloadBranchAt`)
      * @constructor
      */
-    constructor(originator: any, operation: any, schema: any, table?: any, attribute?: any);
+    constructor(originator: any, operation: any, schema: any, table?: any, attribute?: any, branchPath?: any);
     originator: any;
     operation: any;
     schema: any;
     table: any;
     attribute: any;
+    branchPath: any;
 }
 /**
  * Constructor function for the message of user ITC events

package/dist/server/threads/itc.js

@@ -64,14 +64,18 @@ function validateEvent(event) {
  * @param schema
  * @param table
  * @param attribute
+ * @param branchPath the branch directory when the change is to a scope-private branch of `schema`
+ *   rather than to the database itself (resources/databases.ts `reloadBranchAt`)
  * @constructor
  */
-function SchemaEventMsg(originator, operation, schema, table = undefined, attribute = undefined) {
+function SchemaEventMsg(originator, operation, schema, table = undefined, attribute = undefined, branchPath = undefined) {
     this.originator = originator;
     this.operation = operation;
     this.schema = schema;
     this.table = table;
     this.attribute = attribute;
+    if (branchPath)
+        this.branchPath = branchPath;
 }
 /**
  * Constructor function for the message of user ITC events

package/dist/server/threads/itc.js.map

@@ -1 +1 @@
-{"version":3,"file":"itc.js","sourceRoot":"","sources":["../../../server/threads/itc.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACtD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;AACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE7F,MAAM,CAAC,OAAO,GAAG;IAChB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,YAAY;CACZ,CAAC;AACF,IAAI,iBAAiB,CAAC;AACtB,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IAC5C,iBAAiB,GAAG,iBAAiB,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC7E,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM;QAC5B,MAAM,CAAC,WAAW,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,KAAK,CAAC,SAAS;SACnB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAK;IAC1B,sEAAsE;IACtE,mFAAmF;IACnF,uEAAuE;IACvE,IAAI,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;IACvD,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAK;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,qBAAqB,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,YAAY,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/F,OAAO,UAAU,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAG,SAAS,EAAE,SAAS,GAAG,SAAS;IAC9F,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,UAAU;IAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"itc.js","sourceRoot":"","sources":["../../../server/threads/itc.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACtD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;AACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC/C,MAAM,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE7F,MAAM,CAAC,OAAO,GAAG;IAChB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,YAAY;CACZ,CAAC;AACF,IAAI,iBAAiB,CAAC;AACtB,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IAC5C,iBAAiB,GAAG,iBAAiB,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC7E,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM;QAC5B,MAAM,CAAC,WAAW,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,KAAK,CAAC,SAAS;SACnB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAK;IAC1B,sEAAsE;IACtE,mFAAmF;IACnF,uEAAuE;IACvE,IAAI,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;IACvD,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAK;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,qBAAqB,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,YAAY,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/F,OAAO,UAAU,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CACtB,UAAU,EACV,SAAS,EACT,MAAM,EACN,KAAK,GAAG,SAAS,EACjB,SAAS,GAAG,SAAS,EACrB,UAAU,GAAG,SAAS;IAEtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,IAAI,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,UAAU;IAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;AAC9B,CAAC"}

package/dist/server/threads/logRotationTransport.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/threads/logRotationTransport.js

@@ -0,0 +1,33 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+// Hands the log-rotation coordinator the thread mesh it needs, from this side of the dependency
+// edge: manageThreads already imports harper_logger, so logging can never import manageThreads.
+const node_worker_threads_1 = require("node:worker_threads");
+const logGenerationCoordinator_ts_1 = require("../../utility/logging/logGenerationCoordinator.js");
+const manageThreads_js_1 = require("./manageThreads.js");
+(0, logGenerationCoordinator_ts_1.setRotationTransport)({
+    threadId: node_worker_threads_1.threadId,
+    broadcast(message) {
+        (0, manageThreads_js_1.broadcast)(message);
+    },
+    sendToThread(target, message) {
+        threads.sendToThread(target, message);
+    },
+    onMessage(type, handler) {
+        (0, manageThreads_js_1.onMessageByType)(type, handler);
+    },
+    onThreadExit: manageThreads_js_1.onThreadExit,
+    peerThreadIds() {
+        // Job workers included: they hold log descriptors whether or not they take part in ITC gossip,
+        // and the deadlock that excludes them from the schema broadcast cannot happen here — the
+        // handler only closes a descriptor, and no caller blocks its event loop on the answer.
+        const ids = new Set();
+        for (let i = 0; i < threads.length; i++) {
+            const peer = threads[i].threadId;
+            if (peer !== undefined && peer !== node_worker_threads_1.threadId)
+                ids.add(peer);
+        }
+        return ids;
+    },
+});
+//# sourceMappingURL=logRotationTransport.js.map

package/dist/server/threads/logRotationTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logRotationTransport.js","sourceRoot":"","sources":["../../../server/threads/logRotationTransport.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,gGAAgG;AAChG,gGAAgG;AAEhG,6DAA+C;AAC/C,mGAAyF;AACzF,yDAA8E;AAS9E,IAAA,kDAAoB,EAAC;IACpB,QAAQ,EAAR,8BAAQ;IACR,SAAS,CAAC,OAAO;QAChB,IAAA,4BAAS,EAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,OAAO;QAC3B,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,OAAO;QACtB,IAAA,kCAAe,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,YAAY,EAAZ,+BAAY;IACZ,aAAa;QACZ,+FAA+F;QAC/F,yFAAyF;QACzF,uFAAuF;QACvF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,8BAAQ;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD,CAAC,CAAC"}

package/dist/server/threads/manageThreads.d.ts

@@ -7,14 +7,84 @@ export function startWorker(path: any, options?: {}): Worker;
  * threads at the same time we shutdown new ones. However, we usually want to limit how many we do at once to avoid
  * excessive load and to keep things responsive. This parameter throttles the restarts to minimize load from
  * thread startups.
- * @returns {Promise<void>}
+ * @param onProgress Called each time a worker has been replaced (or its replacement has been given
+ * up on), so a caller waiting on a wide pool can tell a slow restart from a stalled one.
+ * @returns {Promise<{workersKeptOnOldCode: number, replacementsNotStarted: number}|{declined: true}|undefined>}
+ * from the main thread, how many workers were left running the old code and how many replacements
+ * never reported that they started — or `{declined: true}` when the process is already shutting down;
+ * from a worker, nothing — the restart is handed to the main thread.
  */
-export function restartWorkers(name?: any, maxWorkersDown?: number, startReplacementThreads?: boolean): Promise<void>;
-export function shutdownWorkers(name: any): Promise<void>;
+/**
+ * `application` selects which workers of the type restart: omitted preserves the historic all-worker
+ * behavior, explicit undefined restarts the shared pool only, a name restarts only that application's
+ * dedicated worker, and '*' restarts all.
+ */
+export function restartWorkers(name?: any, maxWorkersDown?: number, startReplacementThreads?: boolean, onProgress?: any, application?: any, ...args: any[]): Promise<{
+    declined: boolean;
+    workersKeptOnOldCode?: undefined;
+    replacementsNotStarted?: undefined;
+} | {
+    workersKeptOnOldCode: number;
+    replacementsNotStarted: number;
+    declined?: undefined;
+}>;
+export function shutdownWorkers(name: any): Promise<{
+    declined: boolean;
+    workersKeptOnOldCode?: undefined;
+    replacementsNotStarted?: undefined;
+} | {
+    workersKeptOnOldCode: number;
+    replacementsNotStarted: number;
+    declined?: undefined;
+}>;
 export function shutdownWorkersNow(name: any): Promise<void>;
 export const workers: any[];
 export function setMonitorListener(listener: any): void;
 export function onMessageFromWorkers(listener: any): void;
+/** Registered by socketRouter: starts and stops dedicated workers to match the root config's isolated applications. */
+export function setIsolatedWorkerReconciler(reconcile: any): void;
+export function setRunningIsolatedApplicationsGetter(getter: any): void;
+/**
+ * The worker that owns `applicationName`'s per-application singletons (its scheduled jobs, its data
+ * files): pool worker 0 for a shared application and for root-level plugins (which pass no name), the
+ * dedicated worker for an isolated one -- never index 0, so node-wide duties stay on the pool, and
+ * never a dedicated worker for anything but its own application.
+ */
+export function isApplicationPrimaryWorker(applicationName: any): boolean;
+/** The worker index as the application sees it: a dedicated worker is its application's worker 0. */
+export function applicationWorkerIndex(): any;
+/**
+ * Whether a singleton set up by APPLICATION CODE runs here (a caching table's `sourcedFrom`
+ * subscription): pool worker 0, or a dedicated worker -- the only code that runs on one is its own
+ * application's, so whatever it sets up is that application's to run. Not for root-level plugins,
+ * which load on every thread and must use isApplicationPrimaryWorker(name).
+ */
+export function runsApplicationCodeSingletons(): boolean;
+/** Whether this thread is a worker dedicated to one isolated application. */
+export function isDedicatedWorker(): boolean;
+export function markBranchStorePath(path: any, isBranch?: boolean): void;
+/**
+ * Whether this thread runs the "last worker" per-store maintenance for `storePath` (TTL scans, storage
+ * reclamation, audit cleanup). Shared stores belong to the last pool worker; a dedicated worker
+ * maintains only its own branch stores, which no other thread has open.
+ */
+export function ownsStoreMaintenance(storePath: any): boolean;
+/** The "worker 0" counterpart: expiration eviction for `storePath`. */
+export function ownsStoreExpiration(storePath: any): boolean;
+/** Every started worker dedicated to `application`, including a replacement still booting. */
+export function workersForApplication(application: any): any[];
+/**
+ * Stop one worker for good: shut it down, honour the drain extension it may ask for, force it after
+ * the same backstop the rolling restart uses (FORCE_EXIT on Bun, where terminate() segfaults), and
+ * resolve once it has exited. Marked as shut down first so its exit does not start a replacement.
+ */
+export function stopWorker(worker: any): Promise<any>;
+/**
+ * The restart scope on the wire: a worker cannot post `undefined` and have it mean "the pool" (a
+ * message with no scope at all means "everything", as every pre-existing sender intends).
+ */
+export function encodeRestartScope(application: any): any;
+export function decodeRestartScope(message: any): any;
 export function onMessageByType(type: any, listener: any): void;
 export function broadcast(message: any, includeSelf: any): Promise<void>;
 export function broadcastWithAcknowledgement(message: any, timeout?: number): Promise<any>;
@@ -37,11 +107,21 @@ export function beginProcessShutdown(): void;
  */
 export function registerWorkerDataProvider(name: any, provider: any): () => void;
 export function onThreadExit(listener: any): void;
+/**
+ * Whether a thread has already been reported dead. Sync, unlike `isThreadRunning`, because it only
+ * reads the tombstone `notifyThreadExit` records below — callers on the exit path need an answer
+ * without awaiting process-group confirmation.
+ */
+export function hasThreadExited(threadId: any): boolean;
+export function notifyThreadExit(deadThreadId: any): void;
 export function registerProcessGroup(processGroupId: any): void;
 export function unregisterProcessGroup(processGroupId: any): void;
+export function isProcessGroupAlive(processGroupId: any, options: any): boolean;
 export function isThreadRunning(ownerThreadId: any, timeoutMs?: number): Promise<boolean>;
 export function waitUntilConfirmedGone(attemptTermination: any, treeIsAlive: any, pollMs: any): Promise<void>;
+export function sendToThread(threadId: any, message: any): boolean;
 export let getThreadInfo: any;
+export let getRunningIsolatedApplications: any;
 export function watchDir(dir: any, beforeRestartCallback: any): Promise<void>;
 import { Worker } from "node:worker_threads";
 export declare let processIncarnation: any;